Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
File: 4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft (raw, json)
Hash identifier: T5HHzeFEln/4zf8LgFKDUPfWA2VkY26y4BlFrHnZEeE=
Subject key identifier: DB:9A:E9:70:1F:6B:AC:1D:EA:82:94:D5:22:06:4D:4D:A0:FF:FF:FF
Authority key identifier: E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91
Certificate issuer: /CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391
Certificate serial: 019F9211B2CF0251B5ABB89C6B78BDE3774B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
Manifest number: 12EF
Signing time: Fri 24 Jul 2026 03:01:01 +0000
Manifest this update: Fri 24 Jul 2026 03:01:01 +0000
Manifest next update: Sat 25 Jul 2026 03:01:01 +0000
Files and hashes: 1: 4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl (hash: 2qT7w3kG7gryI7sgF/Ls3IZ5VbOummZGASwemBY66Bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:b2:cf:02:51:b5:ab:b8:9c:6b:78:bd:e3:77:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391
Validity
Not Before: Jul 24 03:01:01 2026 GMT
Not After : Jul 25 03:01:01 2026 GMT
Subject: CN=db9ae9701f6bac1dea8294d522064d4da0ffffff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1f:c5:59:2b:08:84:59:35:3c:c5:07:30:1b:
be:89:31:e0:f4:93:4a:3a:3b:bb:79:5b:69:1f:55:
38:07:ad:c8:bb:3a:9b:6e:7e:6b:9a:c0:df:de:c2:
c9:b2:40:00:59:05:17:27:e5:af:44:4d:50:03:f3:
80:bf:1e:9d:26:2d:8b:40:b0:66:23:ea:37:34:aa:
fb:4d:e6:ad:ec:f2:fd:15:ab:c0:6d:05:75:11:bb:
99:7b:29:e4:0c:12:29:c9:aa:01:09:1c:f9:4b:d6:
a3:81:81:ec:6d:0d:a7:4f:5e:42:03:58:fa:a1:44:
97:06:85:aa:b9:80:24:61:fb:4f:55:9b:97:3a:8f:
45:af:7f:a6:31:55:a7:11:fd:e9:8f:f5:42:e8:f4:
0f:30:36:15:70:7a:96:c3:9f:2f:2d:34:0e:77:52:
e8:ae:ad:88:62:e8:86:ea:3e:54:c8:32:be:54:40:
f4:97:79:ec:38:9c:85:90:57:ae:88:e6:38:4e:14:
cf:2e:41:2e:a3:fe:44:1e:d6:5f:8b:1c:0d:b2:3b:
8e:c2:54:3d:e9:7d:32:ce:c9:5e:92:e5:c7:84:a3:
1d:2d:04:47:a5:d2:df:40:72:80:c6:9a:24:f1:05:
dd:bb:80:df:a2:df:3c:7b:db:6c:28:de:42:dc:a0:
7d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9A:E9:70:1F:6B:AC:1D:EA:82:94:D5:22:06:4D:4D:A0:FF:FF:FF
X509v3 Authority Key Identifier:
keyid:E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:81:8c:f9:29:e5:d5:6c:31:ae:df:ba:08:ac:54:76:63:49:
57:e7:2b:c4:82:66:07:86:58:c4:f4:7b:98:38:61:1a:e0:67:
c6:a9:2b:03:b6:f8:18:27:fa:0f:cc:31:65:cf:a2:5b:49:88:
96:d0:2a:9b:41:8c:99:85:01:cc:82:6a:c8:d3:2d:c0:b3:da:
6d:6c:67:94:e6:08:0c:f2:d9:63:e8:02:70:77:cb:c8:d8:cd:
f6:c8:51:3b:e2:54:af:83:27:40:80:98:95:da:10:e1:04:f0:
5d:c3:38:17:b2:a6:12:56:b1:a6:b6:77:e5:1f:4c:ff:27:1a:
29:bb:91:0f:96:89:89:04:ec:97:40:a4:3b:ef:00:ab:de:a9:
c1:36:c7:4b:f1:28:5f:19:09:34:1d:11:34:31:e7:44:da:0a:
a1:b8:fb:2d:be:cd:de:c9:4c:80:cf:d2:24:72:3a:12:f6:1f:
41:dd:cb:70:6d:6b:d6:85:b8:ea:93:db:ea:81:9e:dd:38:f4:
1f:8f:d0:04:c9:01:28:61:68:3b:ec:e5:f2:6d:fa:f3:66:c5:
b2:ea:74:7b:ac:ef:00:c1:90:c9:ca:19:75:57:86:d2:93:80:
fa:e7:35:0c:9b:0a:b3:df:77:61:76:1b:e1:06:77:04:77:64:
4b:27:ec:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:28:22 2026 by rpki-client